Skip to content
CVE PROGRAM SOURCE RECORD3.1 Low

CVE-2021-25740

Holes in EndpointSlice Validation Enable Host Network Hijack

Description

A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Kubernetes Kubernetes

  • 0 to < *affected

References